CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-38106) Technical Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments
[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems
Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server deployments running the CNG Key Isolation (KeyIso) service
[Impact] Local authenticated attackers with low privileges can execute arbitrary code with SYSTEM privileges by running a specially crafted application
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and restrict unauthorized local access